Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/0O9x83-lbjQhQ0H0QNL4onc5rtE.roa
File: 0O9x83-lbjQhQ0H0QNL4onc5rtE.roa (raw, json)
Hash identifier: gCcafB1+mESKS3BVJYDajJPvasqf2Tc5KeBGiyOT4to=
Subject key identifier: D0:EF:71:F3:7F:A5:6E:34:21:43:41:F4:40:D2:F8:A2:77:39:AE:D1
Certificate issuer: /CN=c3fb403a241883e58fced52d39d80eabd52bb36f
Certificate serial: 019425FDE3CD9484E3325469295B4C7BB06D
Authority key identifier: C3:FB:40:3A:24:18:83:E5:8F:CE:D5:2D:39:D8:0E:AB:D5:2B:B3:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w_tAOiQYg-WPztUtOdgOq9Urs28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/0O9x83-lbjQhQ0H0QNL4onc5rtE.roa
Signing time: Thu 02 Jan 2025 07:49:43 +0000
ROA not before: Thu 02 Jan 2025 07:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60700
IP address blocks: 194.44.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:e3:cd:94:84:e3:32:54:69:29:5b:4c:7b:b0:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3fb403a241883e58fced52d39d80eabd52bb36f
Validity
Not Before: Jan 2 07:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d0ef71f37fa56e34214341f440d2f8a27739aed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:54:bc:41:1f:30:e0:ef:20:12:df:0b:7c:9c:
3d:e2:79:81:6a:d5:9c:d2:e9:a2:79:94:dc:b0:15:
75:3b:c7:fd:f2:55:60:ce:97:4b:e0:56:69:6a:f7:
18:8d:32:c6:24:6a:b7:c5:47:03:a4:b7:b5:4e:6c:
0d:c0:ee:98:f1:db:9f:fd:19:a8:c0:ef:83:2d:bc:
36:58:11:30:9b:e7:05:0d:fc:86:cb:8b:79:27:40:
4c:37:58:c6:ba:16:cc:73:e4:9c:27:64:b6:47:31:
9d:b4:c9:bc:e9:da:b3:e4:63:da:77:d2:50:09:ed:
0b:44:aa:a3:14:bd:7e:e1:75:2a:3d:49:3c:19:c1:
74:fe:65:20:0e:0e:cb:12:f2:be:23:69:cb:92:51:
07:5e:43:27:94:e9:62:00:6e:20:18:4c:ea:b1:54:
96:db:fa:da:10:60:0d:84:29:5d:db:b7:7d:7c:b0:
19:ee:c9:09:ab:08:9f:04:2f:bd:7e:37:3e:84:14:
81:da:b6:b7:d4:79:d0:e2:e7:5b:ba:18:e3:b6:e4:
ca:0a:48:01:b1:cd:09:f2:52:2d:be:b0:8e:36:3c:
1c:8e:4f:33:08:12:cd:e4:ec:db:4c:9a:48:3a:05:
f8:51:0a:0e:5d:b9:eb:d5:da:b2:3d:ee:d3:c5:7a:
48:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:EF:71:F3:7F:A5:6E:34:21:43:41:F4:40:D2:F8:A2:77:39:AE:D1
X509v3 Authority Key Identifier:
keyid:C3:FB:40:3A:24:18:83:E5:8F:CE:D5:2D:39:D8:0E:AB:D5:2B:B3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w_tAOiQYg-WPztUtOdgOq9Urs28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/0O9x83-lbjQhQ0H0QNL4onc5rtE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/w_tAOiQYg-WPztUtOdgOq9Urs28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.44.30.0/24
Signature Algorithm: sha256WithRSAEncryption
90:ae:c6:5d:38:ba:0f:12:bb:4f:d5:94:cd:f9:b8:c7:f6:fb:
09:78:b3:19:a7:ba:50:3b:31:0d:3e:f3:22:6c:44:72:df:27:
e2:d9:b4:95:8f:46:28:33:c6:0c:37:5e:0e:5a:d8:1e:21:8f:
80:6a:24:3d:44:90:1e:bd:e6:91:78:ae:95:c1:f6:5e:13:e0:
42:13:62:c1:e6:25:b4:8c:28:84:ca:f8:a2:75:b1:1a:53:87:
5a:01:e6:d7:85:3f:ec:99:2e:2f:c2:25:da:16:d2:df:eb:57:
37:24:aa:5d:68:e4:55:f4:57:0d:d3:15:cd:95:c1:4b:35:5e:
42:5c:a5:9c:68:12:2c:d0:5b:f2:59:14:07:f6:38:25:09:b1:
cd:15:68:85:ae:7a:7f:90:95:0b:70:a8:90:d5:d9:47:8f:41:
d5:bd:0c:00:e3:95:75:9d:06:04:7e:3b:a7:8b:a6:66:12:bd:
de:70:14:d7:22:1d:18:db:c6:fa:a1:8b:55:6c:f1:6b:41:0f:
14:02:fb:94:99:42:23:ae:af:60:a5:58:13:77:8c:48:95:1a:
2c:15:fe:f6:9f:a1:bd:02:26:6f:e9:50:d8:ed:30:1f:cc:7d:
a6:6f:a7:f1:35:20:ce:d1:bc:d8:a0:30:98:c1:15:7b:db:72:
ba:46:c3:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:14:49 2025 by rpki-client